Its Kauth kext which monitors file activities.Thanks,Simran

Thanks for your response.Please check following details :1:Kauth kext is basically providing events to user mode for scanning a file. It waits till scanning is done.So kext is waiting for that thread (in user mode) which open a file , scan it and provide result to kauth. Here "open" call of tccd internal file (/Library/Application Support/com.apple.TCC/AdhocSignatureCache/keys) is not completed (it is stucked) and user mode thread is waiting for the same.2:With "Signed and Notarized" build above issue did not occur. It is generated only with the build which is partially signed and not-notarized. (Here, only kexts are signed)Thanks,Simran

Hello,I have verified kauth for details. I have minimized location to generate events to folder "/Library/Application Support/com.apple.TCC/AdhocSignatureCache" only.after machine start , only 2 threads are waiting : which are from the same path with process tccd (root and user mode). no other threads are blocking/ waiting.Please check following points: In my daemon open call is blocking . what are the causes for this? why it is not returning ?How to identify why open is stuck ?Thanks ,Sheetal

Hello,While checking kernel details , I have seen following logs of sandbox and tccd daemons, please check below:Vnode action for "/Library/Application Support/com.apple.TCC/AdhocSignatureCache/F86FE4D8-7544-446E-B7B6-8C2440A00598" in kauth TCCD:Error reading signature from URL: url=/Library/Application Support/com.apple.TCC/AdhocSignatureCache/F86FE4D8-7544-446E-B7B6-8C2440A00598 error=Error Domain=NSCocoaErrorDomain Code=257 "The file “F86FE4D8-7544-446E-B7B6-8C2440A00598” couldn’t be opened because you don’t have permission to view it." UserInfo={NSFilePath=/Library/Application Support/com.apple.TCC/AdhocSignatureCache/F86FE4D8-7544-446E-B7B6-8C2440A00598, NSUnderlyingError=0x7fb8b0f22dd0 {Error Domain=NSPOSIXErrorDomain Code=13 "Permission denied"}}Sandbox: <Our user daemon> (230) System Policy: deny(1) file-read-data /Library/Application Support/com.apple.TCC/AdhocSignatureCache/F86FE4D8-7544-446E-B7B6-8C2440A00598Why sandbox denying to read tccd files ? and open call gets blocked in user mode?Thanks,Simran

Hello, Thanks for your reply. 1: I have checked transmit Rate using CWWiFiClient and compared with the value from "airport tool" and "System Information". This value is same at all the 3 places . 2: I am checking NWConnection in details to explore more. <https://developer.apple.com/documentation/network/nwconnection/collecting_network_connection_metrics> link is not open with "Page not found" error. Thanks.